$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa File: 32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa (raw, json) Hash identifier: ax+BBjnIVQGY4eZAVnTcBIMdJmUpx/Cw1jnmySISPIk= Subject key identifier: 3C:C1:3E:78:89:8A:F3:17:A7:43:92:88:9D:B0:67:AB:F7:86:1E:AE Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584B7F525CD879F7FD330292BC80 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 8069 IP address blocks: 20.33.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:5c:d8:79:f7:fd:33:02:92:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=e5f8d7af-bb39-4485-adc3-c216ed2f8ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:c9:bc:5b:f7:8c:89:7d:5d:00:38:4e:87: ac:a9:bf:73:de:fd:ef:59:b5:4f:19:4f:10:70:f8: 45:e4:08:5e:58:fe:f7:d5:98:da:21:26:d4:a3:d8: 8d:b6:c4:2a:4e:ad:a0:f6:69:78:85:ea:1a:62:62: 7b:99:c6:c5:af:0a:0a:c4:eb:de:ee:aa:d6:7f:cc: d4:ec:9d:64:95:05:4f:0b:4d:f0:e8:2e:b5:64:71: 31:6a:df:e7:b0:16:30:4c:b5:0f:0b:aa:31:0a:ac: 65:7f:1c:fe:0d:4c:a3:dd:0c:ba:46:ee:f9:2f:0b: 83:68:56:d7:74:fb:a8:83:5b:8e:21:c7:e4:d3:89: 3b:b4:17:1e:af:76:0c:71:24:11:2e:b5:7e:fc:26: 59:33:49:97:9e:9a:50:ee:2b:b9:b6:a0:d1:cd:b6: 8d:ab:87:a7:5a:99:1e:3e:8b:e8:37:d6:c0:b6:10: ac:ff:48:dc:91:bb:bf:b9:b7:68:66:f6:2a:98:84: d3:95:9a:51:13:ca:9c:cd:d0:e9:55:6e:4d:cc:2d: 93:4f:37:3e:62:31:ab:ac:ed:d7:b5:33:14:f9:5a: 2b:c3:52:71:0e:47:36:7f:58:db:67:3f:e8:41:09: 7e:f5:4c:27:9f:ed:59:d0:e0:aa:78:58:ba:63:5f: 5a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C1:3E:78:89:8A:F3:17:A7:43:92:88:9D:B0:67:AB:F7:86:1E:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/32e61f71-42cb-3aa3-8fdc-307cc164b9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:db:1c:68:0a:1a:4f:b4:ad:82:2a:dd:51:69:49:1b:cf:9a: c0:08:e5:19:78:0a:d8:68:b8:8f:70:eb:56:75:87:5b:12:b0: 73:af:10:eb:23:05:27:e9:89:29:62:7a:52:d8:96:5f:2e:5e: 2f:84:e5:a0:0c:e7:59:c0:07:63:73:4c:48:c3:e7:74:f3:7a: ec:58:da:f1:a5:e9:3a:d8:94:4f:5b:6a:8e:b0:5b:04:d8:52: db:a8:18:25:85:32:2c:86:6b:14:11:b7:85:ee:43:08:4d:5a: 04:66:2f:0a:3e:fc:3e:5c:af:2e:77:a4:ca:cd:1d:7e:ba:36: 93:20:ae:26:fa:57:27:82:0d:66:ff:02:82:0d:ca:3b:36:2e: 64:67:70:ca:81:c6:08:28:04:7a:87:0b:30:3d:80:4d:e7:b2: 2a:87:b2:e2:6b:ab:4a:84:3b:9e:5d:51:07:db:3b:06:6f:fb: 29:60:9e:9a:20:25:5a:10:7b:6d:7b:f7:9e:66:31:19:f4:df: 2f:04:29:11:37:b6:8c:78:98:a7:59:37:92:a6:e3:9c:0c:c3: 4c:6c:33:9c:fd:73:5f:f0:4c:89:1c:7f:ba:c3:73:c8:79:7f: d0:cd:68:6e:18:6c:68:78:af:5e:d4:21:f5:2f:ee:4e:d5:95: 32:0d:60:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UlzYeff9MwKSvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZTVmOGQ3YWYtYmIzOS00NDg1LWFkYzMtYzIxNmVkMmY4ZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc3JvFv3jIl9XQA4Toesqb9z3v3vWbVPGU8Q cPhF5AheWP731ZjaISbUo9iNtsQqTq2g9ml4heoaYmJ7mcbFrwoKxOve7qrWf8zU 7J1klQVPC03w6C61ZHExat/nsBYwTLUPC6oxCqxlfxz+DUyj3Qy6Ru75LwuDaFbX dPuog1uOIcfk04k7tBcer3YMcSQRLrV+/CZZM0mXnppQ7iu5tqDRzbaNq4enWpke PovoN9bAthCs/0jckbu/ubdoZvYqmITTlZpRE8qczdDpVW5NzC2TTzc+YjGrrO3X tTMU+Vorw1JxDkc2f1jbZz/oQQl+9Uwnn+1Z0OCqeFi6Y19ajwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzBPniJivMXp0OSiJ2wZ6v3hh6uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMzJlNjFmNzEtNDJjYi0z YWEzLThmZGMtMzA3Y2MxNjRiOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFCFmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDbHGgKGk+0rYIq3VFpSRvPmsAI5Rl4CthouI9w61Z1h1sSsHOvEOsj BSfpiSlielLYll8uXi+E5aAM51nAB2NzTEjD53TzeuxY2vGl6TrYlE9bao6wWwTY UtuoGCWFMiyGaxQRt4XuQwhNWgRmLwo+/D5cry53pMrNHX66NpMgrib6VyeCDWb/ AoINyjs2LmRncMqBxggoBHqHCzA9gE3nsiqHsuJrq0qEO55dUQfbOwZv+ylgnpog JVoQe217955mMRn03y8EKRE3tox4mKdZN5Km45wMw0xsM5z9c1/wTIkcf7rDc8h5 f9DNaG4YbGh4r17UIfUv7k7VlTINYBo= -----END CERTIFICATE-----Generated at Mon Oct 20 18:36:26 2025 by rpki-client